{"id":2865664,"url":"https://alion.io/job/dreamhost-security-engineer-ii-california-us-remote","title":"Security Engineer II - California, US (Remote)","company":{"id":348407,"name":"DreamHost","domain":"dreamhost.dev","url":"https://alion.io/company/dreamhost","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Recruitee","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Fullerton, United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":125000,"max":145000,"currency":"USD","period":"year","gross":null,"usd_annual":145000},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Ansible","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Bash","optional":false},{"name":"CI/CD","optional":false},{"name":"Debian","optional":false},{"name":"GCP","optional":false},{"name":"Git","optional":false},{"name":"Harbor","optional":false},{"name":"IAM","optional":false},{"name":"Linux","optional":false},{"name":"OpenStack","optional":false},{"name":"Perl","optional":false},{"name":"Python","optional":false},{"name":"Ubuntu","optional":false},{"name":"WordPress","optional":false},{"name":"Docker","optional":true},{"name":"ISO 27001","optional":true},{"name":"Kubernetes","optional":true},{"name":"LLM","optional":true},{"name":"Model Context Protocol","optional":true},{"name":"PCI DSS","optional":true},{"name":"PHP","optional":true},{"name":"Podman","optional":true},{"name":"SIEM","optional":true},{"name":"SOC 2","optional":true},{"name":"YARA","optional":true},{"name":"YARA","optional":true}],"status":"live","first_seen_at":"2026-10-01T17:17:57Z","employer_posted_date":"2026-10-01","last_verified_at":"2026-10-30T14:58:09Z","board_verified":true,"closed_at":null,"days_open":29,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":29},"description":"Why work for DreamHost?\nWe help people own their digital presence. It's not just wishful thinking. It's our noble cause - an idea that drives everything we do.\nWhen you put your dreams online-your words, your photos, your creations-you shouldn't have to worry about your service provider mining that data for marketing purposes. Those are your dreams - not ours! DreamHost's open platform gives you the power to share your data and the freedom to control how it's used.\nWorking for DreamHost you can be a steward of your own career. We invest in our people, we promote from within the organization when possible and we offer extensive training to aid in your success. In this role, we offer competitive salary, health, vision, and dental insurance, as well as a company-issued laptop, 401k, opportunities for growth, and much much more! We are proud to be a US employer with a fantastic culture and the ability to offer so much to our employees.\nBenefits Offered\nFull health/vision/dental for the entire family at zero cost to team member\n\n3% Safe Harbor contributed to 401(k) plus up to 1% employer match\n\nOpportunities for profit sharing and bonuses\n\nGenerous time-off (starting at 15 vacation days)\n\n11 Paid holidays (Technical Support and Technical Operations use a floating holiday policy)\n\nPaid sick leave (80 hours accrued)\n\nTuition reimbursement (50/50 up to a specific amount)\n\nPet Insurance\n\nThrive Pass wellness allowance of $30 per month\n\nUdemy online learning courses\n\nDisability Insurance\n\nGenerous maternity/paternity leave\n\nDiscounted personal travel through corporate booking program Egencia\n\nLaid-back atmosphere\n\nFun monthly company events\n\nFree web hosting\n\nOverview\nThe Security Engineer II is responsible for protecting DreamHost, our infrastructure, and our customers in a large, multi-tenant Linux hosting environment where untrusted code runs on our machines by design. This is a hands-on engineering role. You will investigate live compromises, build the tooling and detections that find the next one, review the security of our own applications and infrastructure, and drive down long-standing risk across a fleet spanning shared hosting, VPS, managed WordPress, dedicated servers, cloud, and email.\nYou will work on a small security team where everyone owns real workstreams end to end, partners directly with Systems, Development, Abuse, and Support, and is expected to exercise judgment without waiting for permission.\nWhat you'll work on\nIncident response across shared, virtualized, and dedicated Linux hosts - compromise investigation, blast-radius scoping, containment, evidence preservation, and write-ups.\n\nDetection engineering: malware and webshell signatures, log-based detections, and reducing the false positives that create alert fatigue at fleet scale.\n\nApplication security review of our in-house control plane, customer panel, and internal tooling, plus the third-party and open-source code we depend on.\n\nSecrets management modernization such as moving static credentials into Vault, adopting dynamic credentials, and eliminating plaintext secrets from code, logs, and CI.\n\nIdentity and access lifecycle: directory and SSO migration, privileged access review, and durable offboarding.\n\nVulnerability management and patch velocity across a large, heterogeneous fleet, including end-of-life OS and runtime remediation.\n\nAutomation. Anything done manually more than twice is a candidate for tooling, and you'll build it.\n\nSecurity review and governance of AI and agent tooling as it's adopted internally - data exposure, permission scope, agent identity, and abuse paths. You'll also be using these tools heavily yourself; the team runs on them.\n\nResponsibilities\nReasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of the role.\nLead investigation and resolution of complex security incidents, coordinating across teams and communicating status clearly while facts are still incomplete.\n\nDesign and implement safeguards protecting customer sites, accounts, and infrastructure from active and evolving threats.\n\nConduct vulnerability assessments, security reviews, and risk analysis, with remediation guidance engineers can act on.\n\nBuild automation and tooling that improves detection, monitoring, response, and operational safety.\n\nPartner with Systems, Development, Abuse, and Support to get security controls implemented rather than merely recommended.\n\nMentor less experienced team members and contribute to the team's shared knowledge and runbooks.\n\nContribute to security policy, standards, and process, and support compliance efforts without mistaking compliance for security.\n\nRequirements\n3-6 years in security engineering, incident response, application security, offensive security, or systems administration, with demonstrated ability to resolve complex security problems independently.\n\nDepth in at least one of: application security, incident response and detection engineering, or offensive security and penetration testing plus working competence in the other two.\n\nStrong hands-on Linux (Debian/Ubuntu preferred), including low-level concepts: processes, namespaces, capabilities, filesystems, kernels, and how things actually break.\n\nExperience operating long-lived production systems that can't simply be rebuilt including repairing hosts in place, under load, with real users on them.\n\nExperience in multi-tenant or customer-facing environments where users are untrusted.\n\nScripting and automation you've shipped and operated in production. Python, Go, Bash, Perl, or similar. We care that you've built and maintained real tooling, not which language.\n\nLog analysis and investigation at scale, and comfort with intrusion detection and web application firewalls (mod_security or similar).\n\nWorking knowledge of cloud platform security (AWS, GCP, Azure, or OpenStack) including IAM, network controls, and workload isolation.\n\nFamiliarity with secrets management and CI/CD security (Vault or equivalent, pipeline hardening, dependency and supply-chain risk).\n\nVersion control and infrastructure-as-code fluency (Git, Ansible or similar).\n\nPractical, current fluency with AI tooling in your own work. You use it daily, you know where it fails, and you can say what you don't let it do. We are not looking for enthusiasm or for resistance, but for someone who has integrated these tools into real engineering work and formed opinions from experience.\n\nClear written and verbal communication, including translating technical risk for non-technical stakeholders.\n\nA strong sense of ethics, healthy skepticism, and the patience to stay useful under pressure.\n\nNice to have\nWeb hosting or WordPress-at-scale experience, as a provider or a customer.\n\nContainer and orchestration security (Podman, Docker, Kubernetes) including escape and isolation failure modes.\n\nMalware analysis, YARA rule authorship, or reverse engineering.\n\nDetection-as-code or SIEM engineering experience.\n\nHands-on experience securing AI/LLM systems, agent frameworks, or MCP tooling. Prompt injection, tool-permission scoping, or data-boundary work.\n\nFamiliarity with PCI DSS, SOC 2, or ISO 27001 - as context, not as a career.\n\nOpen source contributions.\n\nCompensation\n$125,000-$145,000 / yearly\n\n**DreamHost provides equal employment opportunities to all team members and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.\nThis policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.**","description_format":"text","description_chars":7891,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["401k plan","Company events","Dental insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Web Hosting & VPS"],"lifecycle":[{"event":"open","at":"2026-10-19T17:35:53Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 1 · green card filings: 1","filings_12m":1,"filings_prev_12m":2,"green_card_filings_12m":1,"median_offered_wage_usd":217500,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":43,"band":"fade","label":"Fading","p_open":1,"p_active":0.777,"p_room":0.55,"age_days":28,"expected_fill_days":28,"reasons":["conf:2","win:tail"],"computed_at":"2026-10-30T05:48:23Z"},"pay":{"stated_usd_annual":145000,"is_top_pay":true},"html_url":"https://alion.io/job/dreamhost-security-engineer-ii-california-us-remote","json_url":"https://alion.io/job/dreamhost-security-engineer-ii-california-us-remote.json","meta":{"generated_at":"2026-10-30T20:31:07Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":10549,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-31T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":348407},"rest":"https://alion.io/mcp/rest/get_company?id=348407"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdreamhost-security-engineer-ii-california-us-remote"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdreamhost-security-engineer-ii-california-us-remote"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdreamhost-security-engineer-ii-california-us-remote"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/dreamhost-security-engineer-ii-california-us-remote\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdreamhost-security-engineer-ii-california-us-remote"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":2865664}},{"tool":"search_jobs","arguments":{"company":"dreamhost.dev","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":2865664},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}